Weekly Cyber Security News 22/08/2024

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

A badly coded WordPress plugin again. Luckily it has been caught:

• Critical LiteSpeed Cache Plugin Flaw Exposes WordPress Sites

Sneaky! DNS is such a great lure for using as a control channel. I’m really surprised its not used more:

• New DNS-Based Backdoor Threat Discovered at Taiwanese University

Oh dear. At least they found it in the end…

• Plane-tracking app admits user passwords, SSNs exposed for over 3 years